Title: [237749] tags/Safari-607.1.12.1
- Revision
- 237749
- Author
- bshaf...@apple.com
- Date
- 2018-11-02 13:33:16 -0700 (Fri, 02 Nov 2018)
Log Message
Revert r237553. rdar://problem/45768563
Modified Paths
Removed Paths
Diff
Modified: tags/Safari-607.1.12.1/JSTests/ChangeLog (237748 => 237749)
--- tags/Safari-607.1.12.1/JSTests/ChangeLog 2018-11-02 20:33:13 UTC (rev 237748)
+++ tags/Safari-607.1.12.1/JSTests/ChangeLog 2018-11-02 20:33:16 UTC (rev 237749)
@@ -1,3 +1,7 @@
+2018-11-02 Babak Shafiei <bshaf...@apple.com>
+
+ Revert r237553. rdar://problem/45768563
+
2018-10-29 Mark Lam <mark....@apple.com>
Correctly detect string overflow when using the 'Function' constructor.
Deleted: tags/Safari-607.1.12.1/JSTests/stress/get-stack-double.js (237748 => 237749)
--- tags/Safari-607.1.12.1/JSTests/stress/get-stack-double.js 2018-11-02 20:33:13 UTC (rev 237748)
+++ tags/Safari-607.1.12.1/JSTests/stress/get-stack-double.js 2018-11-02 20:33:16 UTC (rev 237749)
@@ -1,11 +0,0 @@
-function bar(n)
-{
- for (p = 0; p < 30; p++)
- if (p + 0.1)
- n -= 0.2
-}
-
-for (var i = 0; i < 100000; ++i)
- bar(0);
-
-function noInline() { }
Modified: tags/Safari-607.1.12.1/Source/_javascript_Core/ChangeLog (237748 => 237749)
--- tags/Safari-607.1.12.1/Source/_javascript_Core/ChangeLog 2018-11-02 20:33:13 UTC (rev 237748)
+++ tags/Safari-607.1.12.1/Source/_javascript_Core/ChangeLog 2018-11-02 20:33:16 UTC (rev 237749)
@@ -1,5 +1,9 @@
2018-11-02 Babak Shafiei <bshaf...@apple.com>
+ Revert r237553. rdar://problem/45768563
+
+2018-11-02 Babak Shafiei <bshaf...@apple.com>
+
Revert r237576. rdar://problem/45767917
2018-11-02 Babak Shafiei <bshaf...@apple.com>
Modified: tags/Safari-607.1.12.1/Source/_javascript_Core/ftl/FTLLowerDFGToB3.cpp (237748 => 237749)
--- tags/Safari-607.1.12.1/Source/_javascript_Core/ftl/FTLLowerDFGToB3.cpp 2018-11-02 20:33:13 UTC (rev 237748)
+++ tags/Safari-607.1.12.1/Source/_javascript_Core/ftl/FTLLowerDFGToB3.cpp 2018-11-02 20:33:16 UTC (rev 237749)
@@ -1737,10 +1737,9 @@
AbstractValue& value = m_state.operand(data->local);
DFG_ASSERT(m_graph, m_node, isConcrete(data->format), data->format);
+ DFG_ASSERT(m_graph, m_node, data->format != FlushedDouble, data->format); // This just happens to not arise for GetStacks, right now. It would be trivial to support.
- if (data->format == FlushedDouble)
- setDouble(m_out.loadDouble(addressFor(data->machineLocal)));
- else if (isInt32Speculation(value.m_type))
+ if (isInt32Speculation(value.m_type))
setInt32(m_out.load32(payloadFor(data->machineLocal)));
else
setJSValue(m_out.load64(addressFor(data->machineLocal)));
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
